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IN THE CLAIMS 

A presentation of all of the pending claims with their current status indicated follows, 

1. (Canceled) 

2. (Previously presented) The method as defined in claim 1 1 a wherein the sequence 
number is transmitted together with the signing key from the control center to the sender, and 
is transmitted from the sender via the data set to the receiver. 

3. (Previously presented) The method as defined in claim 1 1 , wherein the sequence 
numbers are used to produce signing keys in the control center and corresponding checking 
keys in the receiver. 

4. (Previously presented) The method as defined in claim 11, wherein the sequence 
numbers are used to produce signing keys used in the control center and corresponding check 
keys are used in the receiver wherein the sequence number is transmitted via the data set to 
the receiver. 

5. (Previously presented) The method as defined in claim 11, wherein the sequence 
number is produced by a pseudo-random number generator. 

6. (Previously presented) The method as defined in claim 1 1 , wherein the encryption 
of the sequence number by means of the main key is used as the one-time encryption. 

7. (Previously presented) The method as defined in claim 11, wherein the control 
center produces a number of pairs of signing keys and sequence numbers, and transmits the 
signing keys to the sender, cither separately or together as pairs with the associated sequence 
numbers. 

8. (Previously presented) The method as defined in claim 1 1, wherein the receiver 
maintains a list of already used sequence numbers, and rejects already used sequence 
numbers. 
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9, (Currently Amended) A device for signing a message which is sent from a sender 
to a receiver comprising: 

a control center having a first memory, the control center including one input of a first 
one-time encrypter being connected to the first memory of the control center and another 
input being connected to a generator for a sequence number; 

a receiver having a second memory, each of the control center and the receiver storing 
a secret, common main key, the receiver comprising a signature checker having inputs 
connected to a message and to a signature of a data message block which has arrived via a 
secured transmission; 

a sender capable of receiving at least one pair of a signing key and the selected 
sequence number from the control center, an output of the first one-time encrypter being 
connected to the sender via the secured transmission, the sender comprising, 

a signature generator provided in the sender, and having inputs connected to the 
output of the first one-time encrypter and to the message to be signed, and 

an output of the signature generator providing a signature and being connected to a 
device which assembles at least the signature and the message to form the data message block 
and whose output is connected to the receiver via the secured transmission; 

a second onc-timc encrypter provided in the receiver, the second one-time encrypter 
having inputs connected to the second memory of the receiver for the secret main kev and to 
means for determining a sequence number for the received data message block, the second 
onotime encrypter forming a check key: 

tho inputs of the signature checker being configured to receive a r e further connected to 
an output of the second o ne-time encrypter^ for providing a check key, whos e inputs ar e 
connected to th e s e cond memory of tho receiver for tho socrct main koy -a nd to a m e ans for 
d e t e rmining a sequence number for th e received data message blocks 

the check key and the determined sequence number being used to derive- the check key 
that is used to form a calculated signature for comparison to the signature of the data message 
block; and 

wherein the control center, the receiver, and the sender arc individual and separate one 
from the other. 
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10. (Previously presented) The device as defined in claim 9, wherein the generator to 
produce a sequence number uses a deterministic method to produce one or more sequence 
numbers that correspond to the same number of check keys. 

11. (Currently Amended) A method for signing a message from a sender and for 
checking a signature at a receiver, the method comprising the steps of: 

storing, in a control center and a receiver, a shared main key; 

causing the control center to produce one or more sequence numbers; 

using a selected one of the sequence numbers and the shared main key to create a 
signing key by means of a one-tjme encryption; 

providing at least one pair of the signing key and the selected sequence number to the 
sender via a secure transmission; 

the sender using the at least one pair of the signing key and the selected sequence 
number to form a signature for a message; 

the sender forming a data set; 

the sender sending the message to the receiver via the data set containing at least the 
message and the signature; 

determining, at the receiver, a sequence number for the received data set 

passing the determined sequence number and the shared main key through a one-time 
encryption to produce a check key; 

using the check key that io derived from and the determined sequence number to form 
a calculated signature; and 

comparing the calculated signature to the received signature to verify the received 
message; 

wherein the control center, the receiver, and the sender are individual and separate one 
from the other. 

12. (Previously presented) The method as defined in claim 2, wherein the selected 
sequence number is transmitted via the data set from the sender to the receiver, the step of 
determining a sequence number includes extracting the sequence number from the received 
data set. 
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1 3- (Previously presented) The method as defined in claim 5, the step of determining 

a sequence number includes: 

storing, at the receiver, an initial value for the pseudo-random number generator; and 
receiving the data set at the receiver, the receiver_j>roducing a new value of the 

sequence number. 

14. (Previously presented) The method as defined in claim 1 1 , wherein the sequence 
numbers are comprised of one of decreasing numbers, numbers with a step interval greater 
than unity and numbers representing a date and time, the time including a number of seconds 
from an appointed start time. 

15. (Previously presented) The method as defined in claim 11, wherein the secure 
transmission of the signing key and the selected sequence number between the control center 
and the sender includes one of printing on security paper and storage in a smart card. 

16. (Previously presented) The method as defined in claim 1 1, wherein the calculated 
signature and the received signature are the same when the check key and the signing key are 
the same. 

17. (Previously presented) The method as defined in claim 1 1 7 wherein the control 
center is comprised of a control center for a financial institution, the sender is comprised of 
one of a manufacturer of an automated cash dispensing mechanism and a local branch of the 
financial institution, and the receiver is comprised of an automatic cash dispensing 
mechanism. 
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